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DETAILED ACTION 



1. 



Claims 1 and 9 have been amended. 



2. 



Claims 1-16 are pending. 



Response to Arguments 



3. Applicant's arguments filed 30 November 2006 have been fully considered and 
they are persuasive. 



4. Claims 1-16 are allowed. 

5. The following is an examiner's statement of reasons for allowance: The present 
invention is directed towards a system and method for a single sign-on system for 
remotely operating an application program via a network. Each independent claim 



identifies the uniquely distinct features "updating the sign-on information saved in 
the single sign-on server by sending a new sign-on information to the single sign- 
on server after successfully signing on to the application program server". The 
closest prior art, Kao et al. (US Patent No. 6,275,944) discloses a single sign-on (SSO) 
mechanism to enable a given user to access a target application on a target resource in 
a distributed computer enterprise. One or more configuration directives each identifying 
a given logon process and any associated methods required to access the target 
application on the target resource are stored in a locally accessible database (CIM). For 
each of a set of users, a globally-accessible database (PKM) stores user-specific and 
application-specific information enabling the user to access and logon to one or more 
target resources. However, either singularly or in combination, Kao et al. fail to 
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anticipate or render the claimed limitation of updating the sign-on information saved in 
the single sign-on server by sending a new sign-on information to the single sign-on 
server after successfully signing on to the application program server. 

The closest prior art, Bones et al. (Pub No. 2002/0078386) discloses a method, 
instructions and system is provided for establishing and enforcing change password 
policy in a single sign on environment. In response to receiving a change instruction 
identifying a first single sign-on password, the first single sign-on password is changed 
to create a second single sign-on password. Then a target password is retrieved. The 
target password is modified in a user selected manner to match the second single sign- 
on password to create a modified target password. The modified target password is 
stored. In response to a request from a user requesting access to an application, the 
modified target password is retrieved and the modified target password is provided to 
the requested application. However, either singularly or in combination, Bones et al. fail 
to anticipate or render the claimed limitation of updating the sign-on information saved 
in the single sign-on server by sending a new sign-on information to the single sign-on 
server after successfully signing on to the application program server. 

The closest prior art, Fang et al. (US Patent No. 6,240,512) discloses a method 
of sharing a master key across a set of servers operating a single sign-on (SSO) 
mechanism in a distributed computer network. The master key is useful for encrypting 
user passwords for storage in a globally-accessible registry. The method begins by 
establishing in the registry a group identifying which of the servers in the set, if any, 
have a copy of the master key. At a given server, the method continues by determining 
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whether a copy of the master key is stored at the given server and whether the group 
has at least one member. The master key is then generated at the given server if a copy 
of the key is not stored at the given server and the group does not have at least one 
member. Other servers in the set pull the master key as needed. However, either 
singularly or in combination, Fang et al. fail to anticipate or render the claimed limitation 
of updating the. sign-on information saved in the single sign-on server by sending a new 
sign-on information to the single sign-on server after successfully signing on to the 
application program server. 

The closest prior art, He et al. (US Patent No. 5,944,824) discloses a secured 
network permits a single sign-on ("SSO") of users to a plurality of network elements. 
Data structures, procedures and system components that support the SSO functionality 
in a distributed networked environment are included in the secured network. The SSO 
functionality can be implemented and integrated into an existing network platform or 
used as the backbone protocol to new network installations. DCE-based features as 
well as ERA and EAC can be utilized as the foundation for the implementation. The 
SSO functionality may be implemented and integrated without requiring significant low 
level development or major modifications in a network. However, either singularly or in 
combination, He et al. fail to anticipate or render the claimed limitation of updating the 
sign-on information saved in the single sign-on server by sending a new sign-on 
information to the single sign-on server after successfully signing on to the application 
program server. 
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6. Therefore, claims 1 and 9, and the respective dependent claims 2-8 and 10-16 

are in condition for allowance. 

Conclusion 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Courtney D. Fields whose telephone number is 571- 
272-3871. The examiner can normally be reached on Mon - Thurs. 6:00 - 4:00 pm; off 
every Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on 571-272-3865. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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